Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3481	7.5	重要 Network	アルバネットワークス株式会社	SD-WAN ArubaOS	アルバネットワークス株式会社のArubaOS等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-23826	2026-05-18 12:07	2026-05-12	Show	GitHub Exploit DB Packet Storm

3482	7.5	重要 Network	アルバネットワークス株式会社	SD-WAN ArubaOS	アルバネットワークス株式会社のArubaOS等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-23827	2026-05-18 12:07	2026-05-12	Show	GitHub Exploit DB Packet Storm

3483	7.5	重要 Network	Fleet Device Management	fleet	Fleet Device Managementのfleetにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-23998	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3484	5.3	警告 Network	Fleet Device Management	fleet	Fleet Device Managementのfleetにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-24000	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3485	7.5	重要 Network	strapi	strapi	strapiにおける複数の脆弱性	CWE-200 CWE-22 CWE-943	CVE-2026-27886	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3486	6.5	警告 Network	Grafana Labs	Grafana	Grafana LabsのGrafanaにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-28376	2026-05-18 12:07	2026-05-13	Show	GitHub Exploit DB Packet Storm

3487	2.7	低 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-2900	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3488	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-3073	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3489	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-3074	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3490	5.8	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるフィルタリングの回避に関する脆弱性	CWE-441 フィルタリング回避	CVE-2026-3160	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3411	9.8	CRITICAL Network	-	-	WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option actio…	CWE-306 Missing Authentication for Critical Function	CVE-2019-25738	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

3412	6.5	MEDIUM Network	-	-	Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requ…	CWE-22 Path Traversal	CVE-2019-25740	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

3413	9.8	CRITICAL Network	-	-	Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the username field of session files that allows remote attackers to execute arbitrary code…	CWE-120 Classic Buffer Overflow	CVE-2019-25741	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

3414	8.2	HIGH Network	-	-	WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…	CWE-89 SQL Injection	CVE-2019-25745	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

3415	7.3	HIGH Network	-	-	A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the function Login of the file /admin/admin_class_novo.php of the component Administrat…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-10704	2026-06-4 23:58	2026-06-3	Show	GitHub Exploit DB Packet Storm

3416	7.3	HIGH Network	-	-	A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file /plus/flink.php. The manipulation of the argument msg leads to sql injection. …	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-10607	2026-06-4 23:56	2026-06-3	Show	GitHub Exploit DB Packet Storm

3417	7.3	HIGH Network	-	-	A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyaction.php. The manipulation of the argument postname/des results in sql injection. …	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-10608	2026-06-4 23:56	2026-06-3	Show	GitHub Exploit DB Packet Storm

3418	4.3	MEDIUM Network	-	-	A weakness has been identified in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function TeamTasksTool.executeComplete of the file internal/tools/team_tasks_lifecycle.go of the co…	CWE-862 CWE-863 Missing Authorization Incorrect Authorization	CVE-2026-10616	2026-06-4 23:56	2026-06-3	Show	GitHub Exploit DB Packet Storm

3419	7.3	HIGH Network	-	-	A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handl…	CWE-287 CWE-306 Improper Authentication Missing Authentication for Critical Function	CVE-2026-10617	2026-06-4 23:56	2026-06-3	Show	GitHub Exploit DB Packet Storm

3420	4.3	MEDIUM Network	-	-	A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. Impacted is the function Open of the file src/blender_mcp/server.py. The manipulation of the arg…	CWE-74 CWE-707 Injection Improper Enforcement of Message or Data Structure	CVE-2026-10661	2026-06-4 23:56	2026-06-3	Show	GitHub Exploit DB Packet Storm